Thanks for helping keep @coffeeandfun/maths-captcha and the projects that depend on it safe.
Security fixes are released for the versions listed below.
| Version | Supported |
|---|---|
| 3.x | Yes |
| 2.x | Critical fixes only |
| < 2.0 | No |
Please do not open a public GitHub issue for security problems.
Instead, report it privately using GitHub's Report a vulnerability button on the Security tab of this repository. If you cannot use that, email hellol@coffeeandfun.com.
When you report, please include:
- A description of the issue
- Steps to reproduce it
- The version of the library you tested
- Any relevant code, configuration, or proof of concept
- You will get a reply confirming we received the report, usually within a few days.
- If the issue is accepted, we will work on a fix and keep you updated as progress is made.
- Once a fix is ready, a patched version will be published to npm and a GitHub security advisory will be posted. We will credit you unless you ask to stay anonymous.
- If the issue is declined, we will explain why.
Thank you for practising responsible disclosure. 🧡